hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix tests

Browse Source
This commit is contained in:
amammad
2023-11-02 21:26:05 +01:00
parent 1fc18bee5d
commit bd1ee9b937
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
go/ql/test/experimental/CWE-522-DecompressionBombs/DecompressionBombs.expected
View File

@@ -4,11 +4,16 @@ edges
| test.go:59:16:59:27 | selection of Body | test.go:147:20:147:23 | definition of file |
| test.go:60:16:60:46 | call to FormValue | test.go:106:20:106:27 | definition of filename |
| test.go:61:20:61:48 | call to PostFormValue | test.go:77:24:77:31 | definition of filename |
| test.go:63:13:63:24 | selection of Body | test.go:97:17:97:19 | definition of src |
| test.go:77:24:77:31 | definition of filename | test.go:78:25:78:32 | filename |
| test.go:78:2:78:33 | ... := ...[0] | test.go:81:12:81:12 | f |
| test.go:78:25:78:32 | filename | test.go:78:2:78:33 | ... := ...[0] |
| test.go:81:3:81:19 | ... := ...[0] | test.go:83:37:83:38 | rc |
| test.go:81:12:81:12 | f | test.go:81:3:81:19 | ... := ...[0] |
| test.go:97:17:97:19 | definition of src | test.go:98:29:98:31 | src |
| test.go:98:2:98:32 | ... := ...[0] | test.go:102:11:102:26 | type conversion |
| test.go:98:29:98:31 | src | test.go:98:2:98:32 | ... := ...[0] |
| test.go:102:11:102:26 | type conversion | test.go:103:23:103:28 | newSrc |
| test.go:106:20:106:27 | definition of filename | test.go:108:25:108:32 | filename |
| test.go:106:20:106:27 | definition of filename | test.go:121:43:121:50 | filename |
| test.go:108:2:108:33 | ... := ...[0] | test.go:110:12:110:12 | f |
@@ -160,12 +165,18 @@ nodes
| test.go:59:16:59:27 | selection of Body | semmle.label | selection of Body |
| test.go:60:16:60:46 | call to FormValue | semmle.label | call to FormValue |
| test.go:61:20:61:48 | call to PostFormValue | semmle.label | call to PostFormValue |
| test.go:63:13:63:24 | selection of Body | semmle.label | selection of Body |
| test.go:77:24:77:31 | definition of filename | semmle.label | definition of filename |
| test.go:78:2:78:33 | ... := ...[0] | semmle.label | ... := ...[0] |
| test.go:78:25:78:32 | filename | semmle.label | filename |
| test.go:81:3:81:19 | ... := ...[0] | semmle.label | ... := ...[0] |
| test.go:81:12:81:12 | f | semmle.label | f |
| test.go:83:37:83:38 | rc | semmle.label | rc |
| test.go:97:17:97:19 | definition of src | semmle.label | definition of src |
| test.go:98:2:98:32 | ... := ...[0] | semmle.label | ... := ...[0] |
| test.go:98:29:98:31 | src | semmle.label | src |
| test.go:102:11:102:26 | type conversion | semmle.label | type conversion |
| test.go:103:23:103:28 | newSrc | semmle.label | newSrc |
| test.go:106:20:106:27 | definition of filename | semmle.label | definition of filename |
| test.go:108:2:108:33 | ... := ...[0] | semmle.label | ... := ...[0] |
| test.go:108:25:108:32 | filename | semmle.label | filename |
@@ -301,6 +312,7 @@ nodes
subpaths
#select
| test.go:83:37:83:38 | rc | test.go:61:20:61:48 | call to PostFormValue | test.go:83:37:83:38 | rc | This decompression is $@. | test.go:61:20:61:48 | call to PostFormValue | decompressing compressed data without managing output size |
| test.go:103:23:103:28 | newSrc | test.go:63:13:63:24 | selection of Body | test.go:103:23:103:28 | newSrc | This decompression is $@. | test.go:63:13:63:24 | selection of Body | decompressing compressed data without managing output size |
| test.go:112:37:112:38 | rc | test.go:60:16:60:46 | call to FormValue | test.go:112:37:112:38 | rc | This decompression is $@. | test.go:60:16:60:46 | call to FormValue | decompressing compressed data without managing output size |
| test.go:125:37:125:38 | rc | test.go:60:16:60:46 | call to FormValue | test.go:125:37:125:38 | rc | This decompression is $@. | test.go:60:16:60:46 | call to FormValue | decompressing compressed data without managing output size |
| test.go:142:36:142:51 | fileReaderCloser | test.go:58:15:58:26 | selection of Body | test.go:142:36:142:51 | fileReaderCloser | This decompression is $@. | test.go:58:15:58:26 | selection of Body | decompressing compressed data without managing output size |

2
go/ql/test/experimental/CWE-522-DecompressionBombs/test.go
View File

@@ -60,7 +60,7 @@ func DecompressHandler(w http.ResponseWriter, request *http.Request) {
ZipOpenReader(request.FormValue("filepathba"))
ZipOpenReaderSafe(request.PostFormValue("test"))
GZipOpenReaderSafe(request.PostFormValue("test"))
GZipsafeReader(request.Body, "dest")
GZipReader(request.Body, "dest")
}
func GZipOpenReaderSafe(filename string) {